Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/2NKpBomc_MVLE4sMmvQ375A7y0A.roa
File: 2NKpBomc_MVLE4sMmvQ375A7y0A.roa (raw, json)
Hash identifier: 5HSF8ho2UaVkObSjsxO4wfVog7XEE/Qwu22nAQtHNbM=
Subject key identifier: D8:D2:A9:06:89:9C:FC:C5:4B:13:8B:0C:9A:F4:37:EF:90:3B:CB:40
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 0866E8
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/2NKpBomc_MVLE4sMmvQ375A7y0A.roa
Signing time: Wed 16 Mar 2022 10:06:38 +0000
ROA not before: Wed 16 Mar 2022 10:06:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 91.188.192.0/22 maxlen: 24
217.68.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550632 (0x866e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Mar 16 10:06:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8d2a906899cfcc54b138b0c9af437ef903bcb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:69:c6:56:0e:c2:54:14:38:2d:64:00:f9:
5c:2d:10:9e:9b:03:c7:9e:84:c5:b0:e0:91:73:c2:
f1:58:7e:f5:52:f5:52:ed:ef:74:98:bf:18:b5:e4:
c5:06:40:da:99:89:20:1f:7d:4f:25:5e:5f:a5:ec:
34:28:01:0c:d5:86:89:df:40:de:ca:fe:bc:69:22:
5e:67:6a:43:83:9b:e0:7f:b2:99:73:87:6e:aa:c1:
fd:2a:ec:a4:0a:ee:c5:d5:7a:f8:85:5e:68:e0:b3:
b8:a8:8c:de:d0:0e:f1:38:07:d5:5b:17:59:b6:be:
b7:d9:d9:62:72:fb:bc:50:86:b7:9f:74:2a:69:3f:
46:55:57:30:4f:b0:04:92:28:38:85:77:67:7a:c8:
4d:c9:c9:d9:b6:c6:aa:31:b6:2b:6d:12:e5:32:3a:
02:99:44:f3:f4:ca:e1:e0:49:05:d4:15:ee:a6:56:
9e:a6:22:0d:a8:d4:9c:ca:c2:68:8e:31:1d:6d:3b:
f5:19:df:c6:29:51:94:f5:42:0d:0b:db:cd:0b:e4:
be:c5:f3:a2:d6:f0:c1:2e:88:87:a3:cc:a4:5c:19:
65:45:4c:ae:1b:30:3b:3f:dc:d8:70:32:6d:ec:96:
50:01:c1:50:ea:c1:8e:89:d1:04:5f:03:08:ad:99:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:A9:06:89:9C:FC:C5:4B:13:8B:0C:9A:F4:37:EF:90:3B:CB:40
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/2NKpBomc_MVLE4sMmvQ375A7y0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.192.0/22
217.68.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:b3:1a:5c:de:ed:f6:fa:b8:18:21:dd:17:40:53:5d:18:74:
87:60:f5:04:59:7d:77:79:3b:90:01:96:ac:e4:5a:fc:3a:78:
ed:40:ea:28:08:68:5b:8a:4f:45:c3:e5:5d:6b:f3:15:fe:71:
9f:9a:4f:9a:c6:40:c4:0f:3e:dc:cb:a4:c1:49:80:95:33:a5:
74:3a:dd:80:52:b6:54:68:14:17:88:cc:b6:28:bf:da:88:92:
e2:77:b5:3b:09:0d:91:12:c4:80:94:ad:c7:6b:60:b8:67:75:
47:7e:ce:ba:bc:56:f4:34:52:8c:c0:39:10:d7:c4:5f:8a:2a:
1c:f9:34:18:75:12:56:ed:17:ca:fe:70:a4:b7:3a:19:5f:60:
c7:52:e7:92:10:51:58:b6:a1:2e:98:92:86:a5:5a:a3:4a:d4:
f9:18:24:91:0a:55:7d:97:c6:cd:8a:04:4b:0c:59:00:2f:5f:
1f:c2:15:1c:76:97:2b:18:45:93:85:0f:4f:02:4a:8d:d6:d4:
ca:2c:f9:6f:38:c8:ff:c3:b6:14:9e:16:10:a4:e8:fe:ef:1a:
44:e9:34:d4:58:7d:84:76:04:5f:44:c6:86:89:01:bd:53:f2:
72:96:24:91:b1:ca:96:6d:99:f4:e5:a7:49:21:2f:61:c4:f8:
96:9e:8b:a6
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDCGboMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3YWRjYWYwHhcNMjIwMzE2
MTAwNjM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkOGQyYTkwNjg5OWNm
Y2M1NGIxMzhiMGM5YWY0MzdlZjkwM2JjYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsWxpxlYOwlQUOC1kAPlcLRCemwPHnoTFsOCRc8LxWH71UvVS
7e90mL8YteTFBkDamYkgH31PJV5fpew0KAEM1YaJ30Deyv68aSJeZ2pDg5vgf7KZ
c4duqsH9KuykCu7F1Xr4hV5o4LO4qIze0A7xOAfVWxdZtr632dlicvu8UIa3n3Qq
aT9GVVcwT7AEkig4hXdneshNycnZtsaqMbYrbRLlMjoCmUTz9Mrh4EkF1BXuplae
piINqNScysJojjEdbTv1Gd/GKVGU9UINC9vNC+S+xfOi1vDBLoiHo8ykXBllRUyu
GzA7P9zYcDJt7JZQAcFQ6sGOidEEXwMIrZlnUQIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFNjSqQaJnPzFSxOLDJr0N++QO8tAMB8GA1UdIwQYMBaAFBTahpugM3Shksjj
vc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Rk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkzLzEv
Mk5LcEJvbWNfTVZMRTRzTW12UTM3NUE3eTBBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8x
OGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkzLzEvRk5xR202QXpkS0dT
eU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW7zAAwQE2UTQMA0GCSqGSIb3DQEB
CwUAA4IBAQBusxpc3u32+rgYId0XQFNdGHSHYPUEWX13eTuQAZas5Fr8OnjtQOoo
CGhbik9Fw+Vda/MV/nGfmk+axkDEDz7cy6TBSYCVM6V0Ot2AUrZUaBQXiMy2KL/a
iJLid7U7CQ2REsSAlK3Ha2C4Z3VHfs66vFb0NFKMwDkQ18Rfiioc+TQYdRJW7RfK
/nCktzoZX2DHUueSEFFYtqEumJKGpVqjStT5GCSRClV9l8bNigRLDFkAL18fwhUc
dpcrGEWThQ9PAkqN1tTKLPlvOMj/w7YUnhYQpOj+7xpE6TTUWH2EdgRfRMaGiQG9
U/JyliSRscqWbZn05adJIS9hxPiWnoum
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:42 2024 by rpki-client on console-ams.rpki-client.org